hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-5241 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-5241 Source advisory: OSV:GHSA-FGCW-684Q-JJ6R...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-5241 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-5241 Source advisory: OSV:PYSEC-2026-2290...

hearbaseline (>=2021.0.3, <=2021.0.5), pydebiaseddta (0.1.0) +2 more potentially affected by CVE-2026-1839 via transformers (4.4.0)

transformers PYPI version 4.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on transformers and may be impacted: - hearbaseline =2021.0.3, =1.0.0a0, =0.6.20, =0.7.18 Source cves: CVE-2026-1839 Source advisory: OSV:PYSEC-2026-2288...